Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / General / Security / February 2005

Tip: Looking for answers? Try searching our database.

Logins created by default

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Peter - 18 Feb 2005 23:05 GMT
Besides BUILTIN\Administrators and sa, are there any logins which will be
created by default in SQL Server 2000?  It seems that a Windows User (the
user who installs the SQL Server) will be also created automatically.  

Does using Windows Authentication or mixed mode affect which logins will be
created automatically?

Thanks.
Steve Thompson - 22 Feb 2005 14:11 GMT
> Besides BUILTIN\Administrators and sa, are there any logins which will be
> created by default in SQL Server 2000?  It seems that a Windows User (the
> user who installs the SQL Server) will be also created automatically.

Those are the default accounts...

> Does using Windows Authentication or mixed mode affect which logins will be
> created automatically?

No.

Steve
Peter - 23 Feb 2005 19:59 GMT
Steve,

I understand the sa and BUILTIN\Administrators are default accounts for both
Windows Authentication and Mixed mode.

But how about the Windows User login? It seems that it is created
automatically and it is the Windows User who installs the SQL Server.  Is my
understanding correct?

> > Besides BUILTIN\Administrators and sa, are there any logins which will be
> > created by default in SQL Server 2000?  It seems that a Windows User (the
[quoted text clipped - 9 lines]
>
> Steve
Kevin McDonnell [MSFT] - 24 Feb 2005 01:12 GMT
Not unless that user is a member of the local Administrators Group.  
So, any local admin has Windows Auth access to the server by default.  It
doesn't matter who ran setup per se.
Local admin privleges are required to install services.  

Thanks,

Kevin McDonnell
Microsoft Corporation

This posting is provided AS IS with no warranties, and confers no rights.
Peter - 24 Feb 2005 19:35 GMT
Hi Kevin,

I'm trying to find out the following:

1. Whether that Windows User login(the one installed the SQL Server) is
always created automatically during installing a SQL Server using Windows
Authentication or not.

Based on my testing in installing SQL Server with Windows Authentication
when I logged onto the domain, the following logins are created automatically:

sa
BUILTIN\Administrators
domain\user - the Windows User who logged onto the domain

2. Can a user who has local administrative permissions log on to the
operating system locally (so he/she is not logged onto the domain) and
install a SQL Server using Windows Authentication?  If yes, since the user
only logs on locally, I guess that only sa and BUILTIN\Administrators logins
are created automatically. Am I right?

So, basically I want to know what logins are created automatically in
installing a SQL Server using Windows Authentication when:

1.  the user is logged on locally
2.  the user is logged onto the domain

Thanks.

> Not unless that user is a member of the local Administrators Group.  
> So, any local admin has Windows Auth access to the server by default.  It
[quoted text clipped - 7 lines]
>
> This posting is provided AS IS with no warranties, and confers no rights.
Kevin McDonnell [MSFT] - 25 Feb 2005 00:03 GMT
I think the confusion may be in that the account specified to start the
services is added to the logins.

If you specify in setup that a local windows account or domain account
should be used to start the services, (MSSQL and SQL Agent)
then this account is added to the logins.

If you selected to start the service with 'localsystem' which I don't
recommend, then only the Builtin\admin and sa account is
added to the logins.

Hope this helps.

Kevin McDonnell
Microsoft Corporation

This posting is provided AS IS with no warranties, and confers no rights.
Peter - 25 Feb 2005 02:37 GMT
Hi Kevin,

Yes, I use a domain account to start MSSQL and SQL Agent.   I don't remember
seeing any information about this account will be added to logins.

Thanks,

Peter

> I think the confusion may be in that the account specified to start the
> services is added to the logins.
[quoted text clipped - 13 lines]
>
> This posting is provided AS IS with no warranties, and confers no rights.
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.